[GH-ISSUE #203] 你好,请问使用docker部署是否支持在nat环境下部署使用 #188

Closed
opened 2026-03-02 07:44:37 +03:00 by kerem · 1 comment
Owner

Originally created by @cdy668 on GitHub (Sep 7, 2020).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/203

服务端:centos7
客户端:windows7
我这边遇到一个问题,在windows7系统上面连接ipsec的时候报告了一个789的错误提示

使用nc命令测试公网映射的udp端口是OK的
nc -vuz xx.xx.xx.xx 500
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Connected to xx.xx.xx.xx:500.
Ncat: UDP packet sent successfully
Ncat: 1 bytes sent, 0 bytes received in 2.07 seconds.

nc -vuz xx.xx.xx.xx 4500
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Connected to xx.xx.xx.xx:4500.
Ncat: UDP packet sent successfully
Ncat: 1 bytes sent, 0 bytes received in 2.02 seconds.

Originally created by @cdy668 on GitHub (Sep 7, 2020). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/203 服务端:centos7 客户端:windows7 我这边遇到一个问题,在windows7系统上面连接ipsec的时候报告了一个789的错误提示 使用nc命令测试公网映射的udp端口是OK的 nc -vuz xx.xx.xx.xx 500 Ncat: Version 7.50 ( https://nmap.org/ncat ) Ncat: Connected to xx.xx.xx.xx:500. Ncat: UDP packet sent successfully Ncat: 1 bytes sent, 0 bytes received in 2.07 seconds. nc -vuz xx.xx.xx.xx 4500 Ncat: Version 7.50 ( https://nmap.org/ncat ) Ncat: Connected to xx.xx.xx.xx:4500. Ncat: UDP packet sent successfully Ncat: 1 bytes sent, 0 bytes received in 2.02 seconds.
kerem closed this issue 2026-03-02 07:44:37 +03:00
Author
Owner

@hwdsl2 commented on GitHub (Sep 7, 2020):

@cdy668 你好!可以在 NAT 环境下部署,但要确保服务器的 UDP 500 和 4500 端口可以通过客户端访问。请再次尝试连接 VPN 客户端,然后检查一下服务器日志是否有错误 [1]。另外可以尝试这些解决方案 [2]。

如需为 Docker 容器启用日志,请参见 [3]。

[1] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#%E6%A3%80%E6%9F%A5%E6%97%A5%E5%BF%97%E5%8F%8A-vpn-%E7%8A%B6%E6%80%81
[2] https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN#Windows_Error_789
[3] https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/README-zh.md#%E5%90%AF%E7%94%A8-libreswan-%E6%97%A5%E5%BF%97

<!-- gh-comment-id:688018748 --> @hwdsl2 commented on GitHub (Sep 7, 2020): @cdy668 你好!可以在 NAT 环境下部署,但要确保服务器的 UDP 500 和 4500 端口可以通过客户端访问。请再次尝试连接 VPN 客户端,然后检查一下服务器日志是否有错误 [1]。另外可以尝试这些解决方案 [2]。 如需为 Docker 容器启用日志,请参见 [3]。 [1] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#%E6%A3%80%E6%9F%A5%E6%97%A5%E5%BF%97%E5%8F%8A-vpn-%E7%8A%B6%E6%80%81 [2] https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN#Windows_Error_789 [3] https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/README-zh.md#%E5%90%AF%E7%94%A8-libreswan-%E6%97%A5%E5%BF%97
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#188
No description provided.